Unlicensed GLP-1 Prescribing: Florida Criminal Exposure and Federal Risk for Med Spa and Wellness Operators

A wellness business owner in Asheville, North Carolina is facing ten felony counts arising out of five transactions that brought in a total of $1,095. That is the entire alleged financial scope of the case. Ten felonies. Roughly eleven hundred dollars.

That arithmetic is the whole lesson. In GLP-1 cases, criminal exposure does not track the money. It tracks who was licensed, whose name went on the prescription, and what the paperwork said. Operators running weight loss programs out of med spas, wellness studios, and IV clinics keep evaluating their risk by looking at revenue. Prosecutors are not looking at revenue. They are looking at credentials.

In GLP-1 cases, criminal exposure does not track the money. It tracks who was licensed, whose name went on the prescription, and what the paperwork said.

Key Takeaways

• Unlicensed practice of a health care profession in Florida is a third-degree felony under Fla. Stat. § 456.065, carrying a one-year minimum mandatory sentence.
• Ten felony counts arose from about $1,095 in alleged transactions, so exposure in these cases tracks conduct and credentials, not dollar volume.
• Putting another provider's name on a prescription can convert a state licensing case into federal wire fraud under 18 U.S.C. § 1343.
• Aggravated identity theft under 18 U.S.C. § 1028A adds a mandatory consecutive two years, though Dubin sharply narrowed when it applies.
• The Southern District of Florida is among the most active federal health care fraud districts in the country, and GLP-1 programs are on that list.

What Actually Happened in Asheville

On July 13, 2026, WLOS News 13 reported that the owner of an Asheville wellness business was charged with ten felonies: five counts of practicing medicine without a North Carolina license and five counts of obtaining property by false pretenses. Investigators allege she diagnosed clients and then prescribed and distributed tirzepatide, the GLP-1 compound sold under the brand names Mounjaro and Zepbound.

The reported conduct involved two clients and five payments between $195 and $255 across July through September 2025. According to the report, the prescription information either identified the owner herself as a certified nurse practitioner or carried the name of a different nurse practitioner as the medical provider. Court records reportedly do not explain where the tirzepatide came from, and they do not say whether the nurse practitioner whose name appeared on the paperwork knew it was being used.

Two details do more work than the rest combined: the credential question and the missing supply chain. Those are what decide whether a case like this stays in state court or grows into something federal.

The credential trail is the one that hurts. It is documentary, it is dated, and it does not change its story on cross-examination.

What Investigators Are Actually Building

State licensing boards are the front door on these cases. A complaint arrives, a board investigator opens a file, subpoenas records, and refers what looks criminal to a local prosecutor. In Florida, that referral is not discretionary.

The back door is federal. FDA's Office of Criminal Investigations has spent two years working the GLP-1 supply chain, and the cases coming out of that work reach providers, not just importers. In April 2026, a licensed Utah osteopath was indicted for allegedly obtaining misbranded peptides from China, including tirzepatide, semaglutide, retatrutide, and BPC-157, and affixing his own labels before handing them to clinic staff. In July 2026, a Michigan man was sentenced for selling Chinese-sourced semaglutide and tirzepatide without prescriptions.

The regulatory ground shifted underneath all of this. FDA declared the tirzepatide shortage resolved in October 2024 and the semaglutide shortage resolved in February 2025, removing the rationale that had let compounders operate at scale under 21 U.S.C. § 353a. Enforcement moved with it. The question is no longer whether the compounding was permitted. It is whether a licensed prescriber, acting within scope, actually wrote the prescription for the actual patient.

State licensing boards are the front door. FDA's Office of Criminal Investigations is the back door. In Florida the referral from one to the other is mandatory, not discretionary.

What investigators collect is predictable: payment processor records, client text threads, intake forms, supplier invoices, and the credential trail. The credential trail is the one that hurts. It is documentary, it is dated, and it does not change its story on cross-examination.

Florida Exposure and the Federal Overlay That Sits on Top of It

Florida treats this more harshly than most people expect. Under Fla. Stat. § 456.065(2)(d)1, practicing, attempting to practice, or offering to practice a health care profession without an active, valid Florida license is a third-degree felony punishable by up to five years, with a minimum mandatory term of one year and a $1,000 fine. Holding yourself out as able to provide services that require a license counts as an offer to practice. If the practice causes serious bodily injury, it becomes a second-degree felony. A Port St. Lucie injector drew three years in prison under that framework.

Charging a fee on top of that adds a theft or fraud count, usually grand theft or the Florida Communications Fraud Act, Fla. Stat. § 817.034 when the scheme ran through phones, texts, or online booking.

The federal overlay is where exposure multiplies. A prescription drug dispensed without a valid prescription from a licensed prescriber is misbranded under 21 U.S.C. § 353(b)(1). Delivering a misbranded drug is prohibited by 21 U.S.C. § 331(a), and under 21 U.S.C. § 333(a)(2) it is a three-year felony when done with intent to defraud or mislead. Product sourced outside the approved supply chain adds an unapproved new drug theory under 21 U.S.C. § 355. The FDA bulks list decisions on peptides narrowed the compounding lane further.

Then come the fraud statutes. 18 U.S.C. § 1347 reaches health care fraud against any benefit program, public or private, and carries ten years, twenty if serious bodily injury results. Cash-pay wellness practices often fall outside § 1347 because no benefit program was billed, which is exactly why prosecutors charge these as wire fraud under 18 U.S.C. § 1343 instead. Twenty years per count, and every text message, card swipe, and telehealth session supplies a wire.

Aggravated Identity Theft and the Dubin Fight

The sharpest risk in the Asheville fact pattern is 18 U.S.C. § 1028A. Aggravated identity theft carries a two-year sentence that must run consecutive to everything else, with no probation and no concurrent time. When another provider's name is placed on a prescription so the prescription appears to have been written by someone with authority to write it, the government will argue that the misuse of that identity is precisely what made the conduct criminal.

That argument is not automatic. In Dubin v. United States, 599 U.S. 110 (2023), the Supreme Court held unanimously that § 1028A applies only where the misuse of another person's means of identification is at the crux of what makes the conduct criminal, not where it is an ancillary feature of a billing method.

"Whether a prescriber's name on a script is the crux or the packaging is a real fight, and it is worth a mandatory two years. Counsel who does not litigate it has left the most valuable issue in the case on the table."— Aaron M. Cohen, AMC Defense Law

One more piece. Fraud sentencing is driven by loss under the guidelines' § 2B1.1 table, and in a cash-pay wellness case the government routinely proposes gross receipts, which ignores that clients received the product they paid for. That figure is contestable, and contesting it early beats objecting to it in the presentence report.

The Mistakes That Get Made in the First Two Weeks

Almost every avoidable problem in these cases happens before anyone hires a lawyer.

Treating a board inquiry as a licensing matter. A Department of Health investigator is not a compliance consultant. Statements made in a licensing proceeding are available to prosecutors, and no privilege keeps them out. Parallel proceedings are the trap in every health care case.

Cleaning up records. Deleting text threads, rewriting intake forms, or backdating a protocol agreement converts a defensible licensing dispute into an obstruction case under 18 U.S.C. § 1519, which carries twenty years and is easier to prove than the underlying offense.

Calling the other provider. Reaching out to the nurse practitioner whose name appears on the paperwork feels like clearing up a misunderstanding. To an agent it reads as witness tampering, and it hands the government a consciousness-of-guilt argument for free.

Assuming small money means a small case. Eleven hundred dollars produced ten felonies. Charge counts in health care cases follow transactions and credentials, not revenue.

How These Cases Are Actually Defended

The licensure and scope-of-practice questions are more technical than the headline suggests, and technical questions are where cases get won. Florida is a protocol state. Was a written protocol agreement in place? Did a supervising physician exist on paper and in practice? Did a licensed prescriber conduct a good faith examination, even a thin one? Sloppy documentation is not the same offense as practicing medicine without a license, and the distance between the two is real.

Intent is the second front. The felony misbranding provision under § 333(a)(2) requires intent to defraud or mislead. Wire fraud requires a scheme to defraud and specific intent. An operator who genuinely believed she was working under a supervising provider's authority, and who has emails or a signed agreement suggesting as much, has a defense that goes to the element, not to sympathy.

The third front is the one people miss. In a two-client, five-transaction case, the proof depends heavily on what those two clients say, and client testimony in wellness cases is often ambivalent. They wanted the medication, they got it, and they were satisfied until an investigator called. That matters at charging, in plea negotiation, and at trial.

This is the stage where a white collar defense attorney earns the retainer, because effective federal investigation defense here means narrowing the government's theory before it hardens into an indictment. If charges are filed, the strategy shifts to controlling the count structure. Ten counts is a negotiating position, not a verdict. Consolidating counts, defeating § 1028A exposure, and fixing the loss figure move the sentencing math far more than anything said at the podium on sentencing day.

Why the Timing Is Not Flexible

The federal statute of limitations for these offenses is five years under 18 U.S.C. § 3282. Conduct from 2025 stays chargeable into 2030. A resolved state case does not close the federal door. Double jeopardy does not bar successive prosecutions by separate sovereigns, and FDA OCI referrals frequently follow state charges rather than precede them.

The period between a board complaint and a charging decision is the only window in which the outcome is still genuinely open. Once a grand jury has heard a case, positions harden and options narrow. Anyone who has received a Department of Health subpoena, a grand jury subpoena, or a target letter tied to GLP-1 prescribing is already inside that window, whether or not it feels that way.

The clinics most at risk are not the ones with the largest programs. They are the ones with a credential gap, an absent medical director, or a supply chain nobody has examined since 2024.

Common Questions

Facing GLP-1 or Unlicensed Practice Allegations in Florida?

AMC Defense Law represents med spa owners, wellness operators, nurse practitioners, physicians, and clinic staff in state and federal investigations involving prescription drug distribution, unlicensed practice, and health care fraud. The firm handles matters in the Southern District of Florida and nationwide, and regularly works with clients at the pre-indictment stage, when a case can still be shaped.

Pre-indictment defense is where a federal exposure problem actually gets solved: preserve the supply chain record, establish the source, and narrow the government's theory before it hardens into an indictment.

If you have received a Department of Health inquiry, a grand jury subpoena, a target letter, or a visit from federal agents, the conversation is confidential and there is no obligation. If you or your loved ones have been arrested or are under investigation in a GLP-1 or unlicensed practice matter, call Aaron M. Cohen at 561-542-5494 for a confidential consultation, 24 hours a day, to get help.

This article is provided for general informational purposes only and does not constitute legal advice. Reading it does not create an attorney-client relationship with AMC Defense Law or any of its attorneys. The case discussed involves allegations only; no person referenced has been convicted of any offense, and every defendant is presumed innocent unless and until proven guilty. Laws change and outcomes depend on the specific facts of each matter. Consult a licensed attorney regarding your particular situation.

About the author: Aaron M. Cohen is the founder and principal attorney of AMC Defense Law, a criminal defense firm based in Boca Raton, Florida. His practice centers on federal white-collar and health care fraud defense, including Anti-Kickback Statute matters, telemedicine and DME fraud, controlled substance cases, and complex federal litigation. He represents clients in the Southern District of Florida and nationwide.